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Question: 1 


A NetScaler Engineer has created a new custom user monitor script and needs to place it in the 
NetScaler filesystem for use. 
Where must the engineer place the custom script so that it is available for use? 


A. /nsconfig/monitors 

B. /netscaler/monitors 

C. /var/nstemp/monitors 

D. /netscaler/monitors/perl_mod 


Answer: A 


Question: 2 


What are the supported protocols for management authentication? 


A. LOCAL, LDAP, and SAML 

B. RADIUS, LDAP and TACACS+ 

C. CERTIFICATE, LDAP and SAML 

D. RADIUS, TACACS+ and CERTIFICATE 


Answer: B 


Question: 3 


Scenario: A NetScaler Engineer has discovered that the object home.php is NOT found in the cache 
on the system. 

Below is the relevant configuration: 

add cache contentGroup cache_content_group_1 -relExpiry O 

add cache policy cache_pol_1 -rule "http.REQ.URL.CONTAINS(\"home.php\")" -action MAY_CACHE - 
storelnGroup cache_content_group_ 1 

add cache policy cache_pol_2 -rule "http.REQ.METHOD.EQ(\"GET\")" -action NOCACHE 

add cache policy cache_pol_3 -rule "HTTP.RES.HEADER(\"Set-Cookie\").EXISTS" -action NOCACHE 
bind cache global cache_pol_1 -priority 90 -gotoPriorityExpression END -type REQ_OVERRIDE 

bind cache global cache_pol_2 -priority 100 -gotoPriorityExpression END -type REQ_OVERRIDE 

bind cache global cache_pol_3 -priority 100 -gotoPriorityExpression END -type RES OVERRIDE 

The data from the client and the server are as following: 

GET /home.php HTTP/1.1 

Host: www.website.com 

User-Agent: Mozilla Firefox/3.0.3 

Accept: text/html, application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 
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Accept-Language: en-us,en;q=0.5 
Accept-Encoding: gzip,deflate 

Accept-Charset: ISO-8859-1, utf-8;q=0.7,*;q=0.7 
Keep-Alive: 300 

Connection: keep-alive 

Date: Thu, 09 Oct 2014 18:25:00 GMT 

Cookie: sessionid=100xyz 

HTTP/1.1 200 OK 

Date: Thu, 09 Oct 2014 18:25:00 GMT 

Server: Apache/2.2.3 (Fedora) 

Last-Modified: Wed, 09 Jul 2014 21:55:36 GMT 
ETag: "27db3c-12ce-5e52a600" 

Accept-Ranges: bytes 

Cache-Control: private, max-age=0 

Set-Cookie: sessionid=100xyz; expires=Thu, 09-Oct-2014 18:30:00 GMT; path=/ 
Content-Length: 119 

Connection: close 

Content-Type: text/html; charset=UTF-8 

Why does the object NOT persist in the cache? 


A. The request is a GET request. 

B. The response has Set-Cookie. 

C. The content group is missing a cache selector. 

D. The content group has been configured with relExpiry 0. 


Answer: B 


Question: 4 


Which two authentication types on the NetScaler support password changes? (Choose two.) 


A. TACACS+ 
B. LDAP (TLS) 

C. LDAP (SSL) 

D. RADIUS (PAP) 

E. LDAP (PLAINTEXT) 

F. RADIUS (MSCHAPv2) 


Answer: B,C 


Question: 5 


Scenario: A NetScaler Engineer is viewing Authentication, Authorization and Access (AAA) events on 
the NetScaler appliance to determine why a user is unable to log on. The events below have been 
logged during this timeframe: 

Fri Oct 17 18:17:16 2014 
/usr/home/build/rs_80_48/usr.src/usr.bin/nsaaad/../../netscaler/aaad/Idap_drv.c[40\]: 
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start_ldap_auth attempting to 

auth scottli @ 10.12.33.216 

Fri Oct 17 18:17:18 2014 
/usr/home/build/rs_80_48/usr.src/usr.bin/nsaaad/../../netscaler/aaad/Idap_drv.c[291\]: 
recieve_ldap_bind_event receive ldap bind event 

Fri Oct 17 18:17:18 2014 
/usr/home/build/rs_80_48/usr.src/usr.bin/nsaaad/../../netscaler/aaad/Idap_drv.c[326\]: 
recieve_ldap_bind_event Idap_bind with binddn bindpw failed:Invalid credentials Fri Oct 17 18:17:18 
2014 /usr/home/build/rs_80_48/usr.src/usr.bin/nsaaad/../../netscaler/aaad/naaad.c[1198\]: 
send_reject sending reject to kernel for : scottli 

What is the root cause of this issue? 


A. The LDAP Base DN is incorrect. 

B. The Bind DN credentials are invalid. 

C. The LDAP server is NOT responding. 

D. The user has entered an invalid password. 


Answer: B 


Question: 6 


A company has an external-facing web application that requires end-to-end encryption and Layer-7 
functionality. 
Which protocol type would an engineer choose for the virtual server and service? 


A. SSL 

B. SSL_TCP 

C. SSL_PUSH 
D. SSL_BRIDGE 


Answer: B 


Question: 7 


Scenario: A NetScaler Engineer has enabled the HTTP Compression feature on an existing production 
NetScaler. The engineer is using the built-in policies. The engineer reviews the HTTP Compression 
statistics but does NOT see any compression statistic data. 

What is the likely reason? 


A. SSL protocol is being used for encryption. 

B. The Compression Policy engine is set to default. 

C. "Allow Server side compression" is checked on the NetScaler. 

D. Responses with the Content-Length or Chunked header are being sent from the server. 


Answer: C 
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Question: 8 


Which two of the listed statements are true about Access Control Lists (ACLs) on the NetScaler? 
(Choose two.) 


A. Extended ACLs may BRIDGE traffic. 

B. Simple ACLs are bound on ALL interfaces. 

C. Extended ACLs are evaluated after creation. 

D. Simple ACLs are processed after Extended ACLs. 


Answer: A,B 


Question: 9 


What is the purpose of the SSL Certificate Authority (CA) root certificate during an SSL connection? 


A. SSL Cipher Exchange 

B. Session Key Exchange 

C. Pre Shared Master Secret Generation 
D. Server Certificate Signature Verification 


Answer: A 


Question: 10 


In order to create a three-node NetScaler cluster, all nodes must and 
(Choose the two correct options to complete the sentence.) 


A. be physical appliances 

B. have Platinum licensing 

C. be using the same build 

D. be the same platform model 


Answer: C,D 


Question: 11 


Scenario: A NetScaler Engineer has been tasked with reconfiguring an existing NetScaler 
deployment. The engineer is currently running a high-availability (HA) pair of NetScaler 10.5 
appliances, but the Vice President of IT has requested a more efficient way of preserving and 
balancing network resources and throughput while having a single point of management for the 
NetScaler appliances. 

What should the engineer configure to satisfy the requirements outlined by the Vice President of IT? 


A. Switch from traditional HA to -INC mode HA. 
B. Break the HA pair and configure clustering instead. 
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C. Break the HA pair and configure three standalone NetScaler nodes. 
D. Leave HA enabled and increase bandwidth to both NetScaler nodes. 


Answer: B 


Question: 12 


A NetScaler Engineer plans to deploy a third-party application that will perform scheduled 
configuration auditing by using NITRO API with a REST interface. 
Which management protocol should the engineer enable to allow NITRO API access? 


A. SSH 

B. HTTP 
C. Telnet 
D. SNMP 


Answer: B 


Question: 13 


Traffic to which destination is sourced from the NetScaler IP (NSIP) by default? 


A. NTP servers 

B. Clients on the Internet 

C. Load-balanced web services 

D. Load-balanced authentication services 


Answer: A 


Question: 14 


Scenario: A NetScaler Engineer configures COOKIEINSERT persistence method for an HTTP VServer 
named 'myApp’. Many clients do NOT allow the persistence cookie to be set and application sessions 
fail as a result. All clients are behind a network address translation (NAT) gateway, which will insert 
the client IP address into an HTTP header called X-Forwarded-For. 

Which command could the engineer execute to provide persistence for clients while still distributing 
the requests across the bound services? 


A. set Ib vserver myApp -persistenceType SOURCEIP 

B. set Ib vserver myApp -persistenceType NONE -lbmethod SRCIPDESTIPHASH 

C. set lb vserver myApp -persistenceType COOKIEINSERT -timeout 0 -cookieName X-Forwarded-For 
D. set Ib vserver myApp -persistenceType NONE -Ib method TOKEN -rule "HTTP.REQ.HEADER(\"X- 
Forwarded-For\").VALUE(0) 


Answer: D 
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Question: 15 


Scenario: A NetScaler Engineer has created an SSL virtual server that utilizes SSL services. The 
engineer needs to configure certificate authentication from the NetScaler to the backend web 
services. 

What should the engineer do to meet the requirements outlined in the scenario? 


A. Bind a CA Certificate to the SSL Services. 

B. Bind a Client Certificate to the SSL Services. 

C. Create an SSL policy to present the Client Certificate to the web services. 

D. Enable Client Authentication and set Client Certificate to mandatory on the virtual server. 


Answer: B 


Question: 16 


Which service setting would a NetScaler Engineer use in the command-line interface to limit 
connections to server resources? 


A. -maxReq 

B. -maxClient 

C. -monThreshold 
D. -maxBandwidth 


Answer: B 


Question: 17 


Which statement is true about interface link-state on the NetScaler? 


A. Interface link-state is controlled by ifconfig in BSD. 

B. Interface link-state is dependent on the HAMON setting. 

C. Interface link-state CANNOT be brought down from the NetScaler. 

D. Interface link-state on both appliances is unaffected by the force failover command. 


Answer: C 


Question: 18 


In order to configure integrated cache, a NetScaler Engineer would need to reboot the NetScaler 
when the integrated caching feature is and cache memory limit is set to 
(Choose the correct set of options to complete the sentence.) 


A. enabled; zero 


B. disabled; zero 
C. enabled; non-zero 
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D. disabled; non-zero 


Answer: A 


Question: 19 


Which two certificate formats are supported when creating a certificate key pair on the NetScaler? 
(Choose two.) 


A. PEM 

B. DER 

C. PKCS7 
D. PKCS12 


Answer: A,B 


Question: 20 


As a result of connecting two NetScaler interfaces in the same L2 broadcast domain/VLAN (unless 
link aggregation is configured), the NetScaler will . (Choose the correct option to 
complete the sentence.) 


A. restart 

B. disable one interface 
C. cause a network loop 
D. disable both interfaces 


Answer: C 


Question: 21 


Scenario: Users in an organization need to access several web applications daily. Management has 
asked a NetScaler Engineer to reduce the amount of times users have to enter credentials when 
accessing web applications. 

What should the engineer configure to meet this requirement? 


A. A load-balancing VServer and an authorization policy 

B. An authentication VServer and an authorization policy 

C. An authentication VServer and an authentication policy 
D. A content switching VServer and an authentication profile 


Answer: C 


Question: 22 


The upgrade script copies the updated NetScaler kernel file to the NetScaler directory. 
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(Choose the correct option to complete the sentence.) 


A. /var 

B. /flash 

C. /nsconfig 
D. /flash/boot 


Answer: B 


Question: 23 


Which setting must an engineer ensure is configured before a Subnet IP (SNIP) could be used to 
communicate with servers on the same network segment? 


A. Static route is defined 

B. USIP mode is enabled 

C. USNIP mode is enabled 

D. Default gateway is defined 


Answer: C 


Question: 24 


Which tool could a NetScaler Engineer use to monitor client-side rendering times for a Web 
application that is load-balanced by NetScaler? 


A. Tcpdump 

B. Insight Center 

C. Command Center 

D. NetScaler Dashboard 


Answer: A 


Question: 25 


What should a NetScaler Engineer configure to create load-balancing virtual servers and services on 
the same VLAN with overlapping IP addresses? 


A. Listen policies 

B. Traffic domains 

C. Dynamic routing 

D. Policy-based routing 


Answer: B 
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